Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5NCejvFx6a4hYnzKdu1k_Rfm7tI.cer
File: 5NCejvFx6a4hYnzKdu1k_Rfm7tI.cer (raw, json)
Hash identifier: JjbHgNU7RlYrcFJ82BLBGcHZVJT1WFoGADjDwghuLSw=
Subject key identifier: E4:D0:9E:8E:F1:71:E9:AE:21:62:7C:CA:76:ED:64:FD:17:E6:EE:D2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228DE48E4B0D364F505F9ACBF78EB3B7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/58/8c8811-01c6-47c2-b5f0-3c1624100752/1/5NCejvFx6a4hYnzKdu1k_Rfm7tI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/58/8c8811-01c6-47c2-b5f0-3c1624100752/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:48:32 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 21314
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:e4:8e:4b:0d:36:4f:50:5f:9a:cb:f7:8e:b3:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e4d09e8ef171e9ae21627cca76ed64fd17e6eed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:83:d7:e8:15:b1:0e:0f:42:80:46:a8:36:37:
48:2b:c9:da:93:aa:4b:3f:9a:a9:a4:60:4f:ec:47:
79:d3:c9:7e:9a:18:8d:40:85:47:59:f4:c6:1c:47:
2c:b9:8b:7c:e8:ba:f2:f5:82:57:2e:5c:c6:18:bb:
7f:d0:e9:20:bf:31:96:47:2e:b5:0f:7b:6b:a1:2a:
34:7c:a5:42:79:aa:a8:35:16:12:7b:47:53:2e:26:
95:40:94:8c:a2:50:8f:1e:fa:c9:b0:57:37:cc:96:
36:f4:26:d4:fa:5f:89:2c:45:b5:31:be:25:7a:46:
ba:f7:ed:52:85:24:15:c6:2f:81:6c:fe:66:1b:14:
20:d0:58:d0:a1:ab:10:08:21:33:c4:62:02:36:b4:
c0:35:23:8b:2c:78:9c:b7:77:fa:62:58:73:35:9e:
95:2a:04:1f:ae:8e:2f:de:63:68:69:08:6b:27:96:
22:03:b3:3c:a6:24:a8:37:ef:d9:4d:24:0f:bf:b9:
c1:57:a2:1d:c7:73:fa:96:1f:f5:98:72:80:9e:27:
db:d1:61:a9:42:08:ba:83:01:46:53:ac:4d:79:80:
bf:0f:43:a1:d8:a7:69:d2:d4:38:8b:df:72:c8:d9:
b7:f4:3b:9b:f6:85:cf:4f:ed:e9:8c:18:de:55:93:
98:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:D0:9E:8E:F1:71:E9:AE:21:62:7C:CA:76:ED:64:FD:17:E6:EE:D2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8c8811-01c6-47c2-b5f0-3c1624100752/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8c8811-01c6-47c2-b5f0-3c1624100752/1/5NCejvFx6a4hYnzKdu1k_Rfm7tI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
21314
Signature Algorithm: sha256WithRSAEncryption
9d:df:e2:18:e1:e8:3f:4f:f7:bb:d9:06:b4:86:81:49:f8:de:
99:92:cd:4e:4f:30:3e:f1:87:27:fe:b4:00:8f:e7:1b:9a:f5:
fc:ac:1e:af:68:10:5d:65:7a:de:96:1a:8c:72:f3:41:ad:3b:
54:6e:28:f0:97:7c:c0:cc:71:01:a9:5e:34:f3:d6:58:9f:5f:
9c:55:82:44:cf:46:f6:59:49:7f:d4:3b:25:bc:13:fe:b2:9b:
c4:1b:d5:93:9b:b9:3e:df:ea:eb:a7:e3:41:5a:76:31:93:b2:
6a:a4:1d:78:63:74:65:cd:86:6e:36:a1:a0:39:1f:23:13:f1:
65:19:98:b4:53:c0:b5:f2:e1:31:5d:db:aa:9d:0b:65:cf:e8:
9d:2a:56:7b:4c:33:1a:93:c4:16:f2:5e:68:39:f3:65:76:ff:
50:95:95:ff:f8:81:15:98:29:a5:31:6e:a8:b9:27:06:79:86:
d1:b3:d3:73:73:8b:e2:3d:11:b2:6e:22:11:7c:81:a6:02:96:
e2:7f:62:7f:bb:66:90:70:c5:83:68:a3:81:44:cb:0c:c9:87:
92:1a:f1:1e:df:e8:e0:15:33:ef:a1:b4:14:3f:40:1d:69:79:
0a:24:6e:ed:bb:9e:38:6b:9e:b7:48:4b:19:95:49:9f:dd:81:
65:38:41:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 21:04:15 2025 by rpki-client